CVE-2026-83495

A flaw in the Trainer v2 TrainJob API allows users with permission to create TrainJobs to perform namespace secret exfiltration . By injecting valueFrom.secretKeyRef into environment variable definitions, an attacker can read sensitive secrets when the TrainJob Role-Based Access Control (RBAC) is...

EUVD-2026-118951

A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting valueFrom.secretKeyRef into environment variable definitions. This allows them to read and exfiltrate sensitive information secrets from the namespace, leading to a privilege...